> JapanHacked_
[Contained][Severity: Critical][Intrusion]

Gains: Getchu.com member system breached; passwords and addresses may have leaked

The Getchu.com member management system was accessed without authorization and some member data leaked, possibly including passwords, names and addresses. No count was given.

Disclosed

2026-11-04

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. Gains detected unauthorized access to the system holding Getchu.com member data at about 17:30 and cut off the outside traffic. [1]

  2. It finished blocking the access and checking the system at about 01:00, and the same day disclosed that some member data had leaked. [1]

Impact

Members registered by about 17:30 on 28 October are affected. The fields that may have leaked are member ID, email address, password, name, postcode, address and phone number, depending on what each member registered. No count was given. Card data was not on this system, and DL.Getchu.com and Gyutto.com were not affected. [1] [2]

Gains reset all member passwords and requires a new one at the next login, and asked members to change the same password on other services. It has not disclosed how the attacker got in. [1] [2]

Timeline

  1. Detected 2026-10-28
  2. Disclosed 2026-11-04
  3. 7 days

Services hit

Organizations involved

Sources

  1. [1][Official]当社サイトへの不正アクセスによるお客様情報流出のお詫びとお知らせGains · 2026-11-04
  2. [2][News]ECサイト「Getchu.com」、サイバー攻撃で会員情報の一部流出を確認 ID・パスワード・住所も対象の可能性、再設定を要請Security Measures Lab · 2026-11-05